The Living Database
Store, query, analyze, authenticate, communicate, and evolve your data — in a single self-hosted binary. SapixDB is not just a database that remembers everything. It is a database that thinks, reacts, and grows with your organization.
What is SapixDB?
SapixDB is built for organizations where data integrity, auditability, and intelligence are non-negotiable. It replaces not just a database, but the entire stack of tools you bolt around one.
Living Strand
Every record is cryptographically chained — BLAKE3 + Ed25519. Immutable, verifiable, time-travel queryable. AES-256-GCM encrypted at rest. Nothing can be silently modified or deleted.
Tamper-proof
Intelligence Layer
Natural language queries (94% accuracy, no SQL). O(1) materialized counters. Mutant AI advisors that observe and propose schema improvements — with human approval.
NL · DeepSeek · Mutants
Complete Platform
Built-in: User auth (Argon2id + WebAuthn), Mail (transactional email + inbound inbox), Chat (multi-room messaging), Blob storage, Crons, Triggers, Connectors (Kafka, CDC, Webhooks).
All in one binary
Self-hosted & Secure
Your data never leaves your premises. One master seed encrypts all agents via HKDF. HIPAA PHI classification, SOX audit trail, WebAuthn passkeys, IP rate limiting, Shamir key management.
On-premises · Air-gap
Why traditional databases fall short in 2026
Your current database was built for storage — not for evidence. As regulations tighten and digital transformation accelerates, these gaps become critical business risks.
Audit trails are an afterthought
Most databases need external triggers, shadow tables, or a third-party audit service — all of which can fail, be misconfigured, or silently miss bulk deletes and schema changes.
No way to prove what was true "then"
When a regulator asks "what was this record on March 5th?" — UPDATE overwrites history. Answering requires backup restoration or manual shadow tables built years ago.
Data analysis requires specialists
Answering a business question requires SQL expertise, a BI analyst, or waiting days for IT. Non-technical stakeholders cannot self-serve — decisions are delayed.
Live counters and dashboards are expensive
Running totals, loyalty balances, and KPIs require heavy COUNT/SUM scans — or a separate data warehouse that is always 15 minutes stale.
Auth, messaging, and storage are siloed
Every modern application needs a database + auth provider + email service + message broker + search engine. Five vendors, five contracts, five failure points.
Data leaves your premises
Cloud databases place your most sensitive records — patient data, financial logs, maintenance history — on another company's servers, under their jurisdiction and security posture.
What your current database cannot do
| Capability | PostgreSQL / MySQL | MongoDB | Firebase / Supabase | SapixDB |
|---|---|---|---|---|
| Immutable audit trail (built-in) | ✗ Manual triggers | ✗ Change streams | ~ Partial | ✓ Always on |
| Cryptographic proof per record | ✗ | ✗ | ✗ | ✓ Ed25519 + BLAKE3 |
| Time-travel queries | ~ Extensions | ✗ | ✗ | ✓ Native, any timestamp |
| Natural language queries | ✗ | ✗ | ✗ | ✓ 94% accuracy |
| O(1) running counters | ✗ Aggregation scans | ✗ | ✗ | ✓ Materialized |
| Built-in user auth (self-hosted) | ✗ Separate service | ✗ | ~ Cloud only | ✓ Embedded |
| Built-in email + chat | ✗ | ✗ | ✗ | ✓ Native add-ons |
| AI schema advisors (governed) | ✗ | ✗ | ✗ | ✓ Mutants |
| AES-256-GCM per-agent encryption | ~ OS-level only | ~ Enterprise only | ~ Vendor-managed | ✓ HKDF master seed |
| On-premises, air-gap capable | ✓ Self-hosted | ✓ | ✗ Cloud | ✓ Single Docker binary |
The Strand — tamper-proof by design
Every data domain is an Agent with its own append-only Strand. Each block is signed and linked — altering any record breaks every downstream hash.
Master Seed → Per-agent Keys (HKDF) — Stolen files are unreadable
One 32-byte SAPIX_MASTER_SEED drives all cryptography. Per-agent AES-256-GCM keys and Ed25519 signing keys are derived independently via HKDF — domain-separated, one-way. If strand segment files are stolen from disk, they are completely unreadable without the master seed. Key storage options: HashiCorp Vault, Shamir secret sharing, AES-sealed keyfile, or environment variable.
You're happy with your database. Here's what you're missing.
When auditors ask "who changed this record and when?" — you reconstruct it from log files, backup tables, and hope your triggers didn't fail.
Every write is a permanent, signed, timestamped entry. GET /v1/strand/verify returns cryptographic proof in milliseconds — no reconstruction needed.
"Show me the maintenance record as it was on January 1st" requires backup restoration, a shadow table, or admitting you can't answer the question.
Time-travel is a first-class query type. Pass any timestamp — SapixDB replays the strand to that exact state. No backups, no extra tables, no drama.
Dashboard KPIs run expensive COUNT/SUM scans on production — or you maintain a data warehouse that's always 15 minutes stale and requires a separate contract.
Define a counter once. Updated on every write, fire-and-forget. Your dashboard reads a single value — sub-millisecond, always current, regardless of record count.
You run a database, an auth provider, an email service, and a message broker. Each has its own vendor, SLA, and failure mode you need to monitor separately.
Auth, Mail, Chat, Blobs, Crons, Connectors — all embedded in the same binary, on the same server, with the same audit trail and the same master key protecting everything.
A complete query engine — not just key-value lookups
SapixDB ships a full-featured query engine on top of the append-only strand. Every capability below is built in — no plugins, no extensions, no separate services.
Full-Text Search
FTS on any field. AND semantics across multiple keywords. Combine FTS filters with structured field filters in one query. No Elasticsearch required.
Graph Index
Create typed edges between agents or individual records. Depth-limited graph traversal. Model supply chains, patient referral networks, or asset hierarchies natively.
Multi-agent Joins
Join records across multiple agents in a single query. Link transactions to users, invoices to contracts, maintenance events to aircraft — without denormalization.
Group-by Aggregations
Group-by with full aggregation functions. Totals by category, averages by agent, ranked lists — all without leaving the database or running a BI tool.
Composite Indexes
Index multiple fields together for O(log n) lookups on complex filter combinations. Status + date + category queries resolve in microseconds on millions of records.
Explain, Pagination & Views
Inspect execution plans before running. Keyset cursor pagination for stable paging. Computed views, sort, distinct, and field projections — all native.
Natural language queries and AI-governed schema advisors
🗣️ Ask Your Data Anything
Anyone in your organization can query data in plain Arabic or English — no SQL, no BI tool. 4-tier pipeline: cache → heuristic → Ollama (GPU optional) → DeepSeek cloud.
Cache
Exact match — instant replay
Heuristic
Pattern rules — handles 90%+ queries, zero API cost
Ollama (local, GPU optional)
On-device model — skip on CPU-only servers
DeepSeek (cloud fallback)
OpenAI-compatible API. Schema + query only — no records sent.
🤖 Mutants — Governed AI Advisors
Mutants are AI agents that observe your strand metadata — schema drift, field usage, zone sizes, capacity trends — and propose structural improvements. They never act autonomously.
🔍 Observe
Mutants continuously monitor agent metadata: field distributions, null ratios, write velocity, capacity forecasts, schema violations.
💡 Propose
When a pattern warrants action, the Mutant drafts a proposal: "Add index on status", "Migrate zone to HighLoad profile", "Archive records older than 90 days."
✅ Human approval required
Every Mutant proposal waits in a queue for a human operator to approve or reject. Mutants are advisors, not autonomous actors — you stay in control.
The features you'd otherwise buy from 6 different vendors
SapixDB ships a complete application platform in the same binary as the database. Every feature below writes its events to the immutable strand — fully auditable, encrypted with the same master key.
Mail Add-on
Send transactional email via Resend or SMTP. Each agent has an addressable inbox. Inbound attachments promoted to BlobStore. Delivery events, bounces, suppression list — all in the strand.
Chat Add-on
Multi-room messaging backed by the strand. SSE real-time delivery. Agents can write messages and ask humans questions. Every message is a signed, immutable strand record.
Blob Store
Store binary files alongside strand data. Chunked upload for large files. Each blob is content-addressed and referenced in the strand audit trail.
Crons + Triggers
Schedule recurring tasks on any agent. Trigger webhooks on every strand write — fan-out to external systems in real time without polling. Trigger history immutably recorded.
Epigenetics
Switch an agent between behavioral modes — HighLoad, Compliance, Analytics, Maintenance — without touching strand data. Mode changes are immutably audited.
Policy Engine + Publications
Retention policies that cryptographically tombstone expired records. Field-level ACL masking. Publications stream strand changes to external subscribers (change data capture).
Enterprise-grade security, built in — not bolted on
🔐 Cryptographic Integrity
BLAKE3 content hashing — every record has a unique fingerprint computed before storage.
Ed25519 agent signatures — every block signed by the agent key. Forgery is mathematically detectable.
Merkle root + seal sig — every 64 MiB segment sealed. Tampering breaks the seal.
Master Seed → HKDF → Per-agent Keys
One SAPIX_MASTER_SEED derives all AES-256-GCM and Ed25519 keys via domain-separated HKDF. Stolen files from disk are completely unreadable. Key sources: HashiCorp Vault · Shamir · Sealed keyfile.
🗝️ Access Control
Root key hierarchy — root key issues scoped API keys with per-agent read/write + usage stats.
WebAuthn passkeys (FIDO2) — passwordless. No passwords to phish or leak.
Built-in auth — Argon2id, magic links, OAuth (Google/GitHub), JWT EdDSA, refresh rotation.
Global IP rate limiting — outermost layer, before database, blocks brute-force.
Brute-force lockout — configurable threshold; every auth event signed to the strand.
📋 Compliance
HIPAA — 39 PHI fields auto-classified, envelope AES-256-GCM encryption, per-field access logging, on-demand audit reports.
SOX — immutable transaction ledger, cryptographic proof, full change history for financial data.
Self-hosted — your data stays on your servers. Air-gap deployment supported.
SapixDB across sectors
Pharmacy & Drug Retail
Every dispensing event is an immutable signed record. Loyalty balances as O(1) counters — no batch jobs. Pharmacists query patient history in plain Arabic without SQL.
Aviation & Airlines
Maintenance records cryptographically verifiable by regulators. Open findings tracked in real time as O(1) counters. Loyalty miles balance readable in sub-milliseconds per member.
Real Estate & Construction
Contractor payments, inspections, and design changes — all immutable and signed. Budget spend and open punchlist items tracked as O(1) counters, visible instantly.
Banking & Finance
Every transaction is a signed strand entry. Time-travel for regulatory look-back periods. SOX audit reports on demand with full cryptographic evidence chain.
Insurance
Claims history permanently recorded. Adjusters ask "all claims over SAR 50,000 in Q3" in plain language — instant answer, no SQL developer needed.
Hospitals & Healthcare
39 PHI fields auto-classified and encrypted. Every record access logged to the strand. HIPAA audit reports generated in seconds. No third-party HIPAA SaaS needed.
Real-time streaming, connectors, and historical replay
Real-time SSE + Connector Hub
Subscribe to any agent via SSE — every new record pushed the instant it is written. Connector Hub bridges external systems: ingest from Kafka, PostgreSQL CDC, or REST; fan-out to webhooks or S3.
⏪ Time-Travel + Distributed Mode
Query any agent's state at any past point. Replicate strands across nodes with Cell Division. Run atomic distributed transactions with Saga — commit-or-rollback across multiple agents.
One system instead of eight
Traditional Stack — 8 vendors, 8 contracts, 8 failure points
Storage only — no audit trail, no time-travel
Separate — gaps possible, triggers can fail
Cloud SaaS — data leaves your premises
Separate vendor, no audit trail
Another SaaS — chat history on their servers
Real-time events — separate cluster to operate
Full-text search — sync lag, separate cluster
Stale — expensive aggregation at read time
SapixDB — one binary, zero sync lag, one audit trail
SapixDB
Single Docker container · Self-hosted · Air-gap capable
Ready to see it
with your own data?
We'll provision a 2-month Enterprise trial — fully featured, on your servers, with your actual data. Your team evaluates everything. You own it from day one.
Built-in Auth · Mail · Chat · Blob Store · Crons · Triggers
HIPAA & SOX compliance · WebAuthn passkeys · Dedicated onboarding
Your data stays on your premises. Always.